{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T03:50:05Z","timestamp":1782877805446,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":52,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,10,27]],"date-time":"2024-10-27T00:00:00Z","timestamp":1729987200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62202414"],"award-info":[{"award-number":["62202414"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,10,27]]},"DOI":"10.1145\/3691620.3695493","type":"proceedings-article","created":{"date-parts":[[2024,10,18]],"date-time":"2024-10-18T15:39:19Z","timestamp":1729265959000},"page":"1159-1170","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["1+1>2: Integrating Deep Code Behaviors with Metadata Features for Malicious PyPI Package Detection"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5165-5080","authenticated-orcid":false,"given":"Xiaobing","family":"Sun","sequence":"first","affiliation":[{"name":"Yangzhou University, Yangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-1573-117X","authenticated-orcid":false,"given":"Xingan","family":"Gao","sequence":"additional","affiliation":[{"name":"Yangzhou University, Yangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3688-4437","authenticated-orcid":false,"given":"Sicong","family":"Cao","sequence":"additional","affiliation":[{"name":"Yangzhou University, Yangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7267-4923","authenticated-orcid":false,"given":"Lili","family":"Bo","sequence":"additional","affiliation":[{"name":"Yangzhou University, Yangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-5432-651X","authenticated-orcid":false,"given":"Xiaoxue","family":"Wu","sequence":"additional","affiliation":[{"name":"Yangzhou University, Yangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-1513-8254","authenticated-orcid":false,"given":"Kaifeng","family":"Huang","sequence":"additional","affiliation":[{"name":"Tongji University, Shanghai, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,10,27]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Bertus. 2020. Oss gadget: collection of tools for analyzing open source packages. https:\/\/github.com\/microsoft\/OSSGadget."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1162\/TACL\\_A\\_00051"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2023.3319318"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106576"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510219"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3639168"},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 45th IEEE\/ACM International Conference on Software Engineering (ICSE). IEEE, 397--409","author":"Sicong","unstructured":"Sicong Cao et al. 2023. Improving java deserialization gadget chain mining via overriding-guided object generation. In Proceedings of the 45th IEEE\/ACM International Conference on Software Engineering (ICSE). IEEE, 397--409."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the 44th IEEE Symposium on Security and Privacy (SP). IEEE, 2726--2743","author":"Sicong","unstructured":"Sicong Cao et al. 2023. Oddfuzz: discovering java deserialization vulnerabilities via structure-aware directed greybox fuzzing. In Proceedings of the 44th IEEE Symposium on Security and Privacy (SP). IEEE, 2726--2743."},{"key":"e_1_3_2_1_9_1","volume-title":"Python3 control flow graph generator. Retrieved","year":"2022","unstructured":"coetaur0. 2022. Python3 control flow graph generator. Retrieved August 8, 2022 from https:\/\/github.com\/coetaur0\/staticfg."},{"key":"e_1_3_2_1_10_1","volume-title":"Retrieved","author":"Alibaba","year":"2024","unstructured":"Alibaba company. 2024. Pypi mirror of alibaba company. Retrieved May 20, 2024 from https:\/\/mirrors.aliyun.com\/pypi\/simple\/."},{"key":"e_1_3_2_1_11_1","volume-title":"Retrieved","author":"Huawei","year":"2024","unstructured":"Huawei company. 2024. Pypi mirror of huawei company. Retrieved May 20, 2024 from https:\/\/mirrors.huaweicloud.com\/repository\/pypi\/simple\/."},{"key":"e_1_3_2_1_12_1","volume-title":"Retrieved","author":"Snykio","year":"2024","unstructured":"Snykio company. 2024. Open source vulnerability database. Retrieved May 20, 2024 from https:\/\/security.snyk.io\/."},{"key":"e_1_3_2_1_13_1","volume-title":"Retrieved","author":"Tencent","year":"2024","unstructured":"Tencent company. 2024. Pypi mirror of tencent company. Retrieved May 20, 2024 from https:\/\/mirrors.cloud.tencent.com\/pypi\/simple."},{"key":"e_1_3_2_1_14_1","volume-title":"Retrieved","author":"TOTAL","year":"2024","unstructured":"VirusTOTAL company. 2024. Analyse suspicious files, domains, ips and urls to detect malware and other breaches, automatically share them with the security community. Retrieved May 20, 2024 from https:\/\/www.virustotal.com\/gui\/home\/upload."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.18653\/V1\/N19-1423"},{"key":"e_1_3_2_1_16_1","volume-title":"Retrieved","year":"2024","unstructured":"douban. 2024. Pypi mirror of douban company. Retrieved May 20, 2024 from http:\/\/pypi.doubanio.com\/simple\/."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.23055"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/9923234"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE-SEIP52600.2021.00035"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179332"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","unstructured":"Wenbo Guo Zhengzi Xu Chengwei Liu Cheng Huang Yong Fang and Yang Liu. 2023. An empirical study of malicious code in pypi ecosystem. CoRR abs\/2309.11021. arXiv: 2309.11021. 10.48550\/ARXIV.2309.11021","DOI":"10.48550\/ARXIV.2309.11021"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.13328\/j.cnki.jos.006975"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom53373.2021.00091"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/ASE56229.2023.00085"},{"key":"e_1_3_2_1_25_1","volume-title":"Retrieved","year":"2024","unstructured":"lwn. 2024. A backdoor in xz. Retrieved May 20, 2024 from https:\/\/lwn.net\/Articles\/967194\/."},{"key":"e_1_3_2_1_26_1","unstructured":"2024. Maven index. https:\/\/maven.apache.org\/."},{"key":"e_1_3_2_1_27_1","volume-title":"32nd USENIX Security Symposium, USENIX Security 2023","author":"Neupane Shradha","year":"2023","unstructured":"Shradha Neupane, Grant Holmes, Elizabeth Wyss, Drew Davidson, and Lorenzo De Carli. 2023. Beyond typosquatting: an in-depth look at package confusion. In 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9--11, 2023. Joseph A. Calandrino and Carmela Troncoso, (Eds.) USENIX Association, 3439--3456. https:\/\/www.usenix.org\/conference\/usenixsecurity23\/presentation\/neupane."},{"key":"e_1_3_2_1_28_1","unstructured":"2024. New malicious pypi packages caught using covert side-loading tactics. https:\/\/thehackernews.com\/2024\/02\/new-malicious-pypi-packages-caught.html."},{"key":"e_1_3_2_1_29_1","unstructured":"2024. Npm index. https:\/\/www.npmjs.com\/."},{"key":"e_1_3_2_1_30_1","unstructured":"2024. Nuget index. https:\/\/www.nuget.org\/."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-52683-2\\_2"},{"key":"e_1_3_2_1_32_1","volume-title":"Proceedings of the 33rd Annual Conference on Neural Information Processing Systems (NeurIPS), 8024--8035","author":"Adam","unstructured":"Adam Paszke et al. 2019. Pytorch: an imperative style, high-performance deep learning library. In Proceedings of the 33rd Annual Conference on Neural Information Processing Systems (NeurIPS), 8024--8035."},{"key":"e_1_3_2_1_33_1","unstructured":"2024. Pypi index. https:\/\/pypi.org\/."},{"key":"e_1_3_2_1_34_1","unstructured":"2024. Pypi simple. https:\/\/pypi.org\/simple\/."},{"key":"e_1_3_2_1_35_1","volume-title":"2021 china software supply chain security analysis report. Retrieved","year":"2021","unstructured":"Qi'anxin. 2021. 2021 china software supply chain security analysis report. Retrieved June 2, 2021 from https:\/\/www.qianxin.com\/threat\/reportdetail?report_id=132."},{"key":"e_1_3_2_1_36_1","volume-title":"Retrieved","year":"2022","unstructured":"Qi'anxin. 2022. 2022china software supply chain security analysis report. Retrieved July 26, 2022 from https:\/\/www.qianxin.com\/threat\/reportdetail?report_id=161."},{"key":"e_1_3_2_1_37_1","volume-title":"Retrieved","year":"2023","unstructured":"Qi'anxin. 2023. 2023 china software supply chain security analysis report. Retrieved July 24, 2023 from https:\/\/www.qianxin.com\/threat\/reportdetail?report%5C_id=297."},{"key":"e_1_3_2_1_38_1","volume-title":"Retrieved","year":"2024","unstructured":"Qi'anxin. 2024. Pypi massive forged packet name attack. Retrieved March 29, 2024 from https:\/\/mp.weixin.qq.com\/s\/VIThE0I5BkQBW6hIOubnkQ."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE43902.2021.00146"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3510003.3510104"},{"key":"e_1_3_2_1_41_1","unstructured":"2024. Tiobe index. https:\/\/www.tiobe.com\/tiobe-index\/."},{"key":"e_1_3_2_1_42_1","volume-title":"Retrieved","author":"Tsinghua","year":"2024","unstructured":"Tsinghua university. 2024. Pypi mirror of tsinghua university. Retrieved May 20, 2024 from https:\/\/pypi.tuna.tsinghua.edu.cn\/simple\/."},{"key":"e_1_3_2_1_43_1","unstructured":"D.-L. Vu. 2020. A fork of bandit tool with patterns to identifying malicious python code. https:\/\/github.com\/lyvd\/bandit4mal."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1145\/3468264.3468592"},{"key":"e_1_3_2_1_45_1","unstructured":"Thomas Wolf et al. 2019. Huggingface's transformers: state-of-the-art natural language processing. arXiv preprint arXiv: 1910.03771."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3523262"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3354049"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2024.3384846"},{"key":"e_1_3_2_1_49_1","volume-title":"Proceedings of the 33rd International Joint Conference on Artificial Intelligence (IJCAI).","author":"Zhang Jiale","year":"2021","unstructured":"Jiale Zhang, Chengcheng Zhu, Di Wu, Xiaobing Sun, Jianming Yong, and Guodong Long. 2021. Badfss: backdoor attacks on federated self-supervised learning. In Proceedings of the 33rd International Joint Conference on Artificial Intelligence (IJCAI)."},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","unstructured":"Junan Zhang Kaifeng Huang Bihuan Chen Chong Wang Zhenhao Tian and Xin Peng. 2023. Malicious package detection in NPM and pypi using a single model of malicious behavior sequence. CoRR abs\/2309.02637. arXiv: 2309.02637. 10.48550\/ARXIV.2309.02637","DOI":"10.48550\/ARXIV.2309.02637"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICBK50248.2020.00071"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.3233\/JIFS-211557"}],"event":{"name":"ASE '24: 39th IEEE\/ACM International Conference on Automated Software Engineering","location":"Sacramento CA USA","acronym":"ASE '24","sponsor":["SIGAI ACM Special Interest Group on Artificial Intelligence","SIGSOFT ACM Special Interest Group on Software Engineering","IEEE CS"]},"container-title":["Proceedings of the 39th IEEE\/ACM International Conference on Automated Software Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3691620.3695493","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3691620.3695493","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:06:19Z","timestamp":1750291579000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3691620.3695493"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,27]]},"references-count":52,"alternative-id":["10.1145\/3691620.3695493","10.1145\/3691620"],"URL":"https:\/\/doi.org\/10.1145\/3691620.3695493","relation":{},"subject":[],"published":{"date-parts":[[2024,10,27]]},"assertion":[{"value":"2024-10-27","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}